Privacy Policy

1. Who we are

Trenith is a software, web, AI, and automation studio serving clients worldwide. For clients contracting with our US entity, the controller is Trenith LLC, a Florida limited liability company (Delray Beach, Florida 33445, United States); our India engineering affiliate and data fiduciary is Trenith Technologies Private Limited (CIN: U62099TS2026PTC216554), registered office: Plot No. 272, Pragatinagar, Hyderabad 500090, Telangana, India. Depending on where you live, comprehensive US state privacy laws, such as the California Consumer Privacy Act as amended by the CPRA and the comparable laws now in effect across roughly twenty states, may give you rights to access, correct, delete, and limit certain uses of your personal information. We honor reasonable requests of this kind regardless of whether we meet a given law's applicability thresholds, and we do not sell your personal information. Florida's Digital Bill of Rights applies only to very large platforms (over one billion dollars in global annual revenue) and does not apply to Trenith, but we extend comparable transparency voluntarily. For any privacy question or to exercise your rights, contact privacy@trenith.com.

2. Information we collect

• Information you provide, name, email, phone, company, project or role details, resumes, files, and anything you submit through contact, intake, review, careers, or portal forms.
• Account & engagement data, records of proposals, agreements, deliverables, support requests, and communications.
• Technical data, IP address, device/browser type, pages viewed, and similar analytics collected automatically via cookies and similar technologies.
• Information from third parties, e.g. authentication providers (such as Google sign‑in) or business contacts who refer you.

We do not knowingly collect special‑category/sensitive data unless you choose to provide it, and we never sell personal data.

3. How we use your data & our legal bases

We use personal data to respond to inquiries, evaluate fit, deliver and support our services, manage billing, secure our systems, meet legal obligations, and improve our offerings. Where the EU/UK GDPR applies, we rely on: contract (to provide services you request), legitimate interests (to run and improve our business and secure it), consent (e.g. certain cookies and marketing), and legal obligation (e.g. tax and accounting). Where the India DPDP Act, 2023 applies, we process personal data on the basis of your consent or other legitimate uses permitted by that Act.

4. Cookies & analytics

We use strictly necessary cookies to run the site and, with your consent where required, analytics and preference cookies. You can control cookies through your browser settings and any consent banner we present. Disabling some cookies may affect site functionality.

5. AI & automation services

We build and operate AI and automation systems for clients. When we deploy AI features on our own properties, we provide transparency consistent with applicable law, including the EU AI Act’s transparency obligations (Article 50, applicable from 2 August 2026), for example, indicating when you are interacting with an AI system and labelling AI‑generated or materially altered content where required. Personal data processed within client systems is handled under the relevant DPA and the client’s instructions; we do not use client or end‑user data to train third‑party AI models except as expressly agreed.

6. How we share data

• Service providers / sub‑processors, hosting, cloud, email, analytics, and payment partners who process data on our behalf under contract (e.g. Google Cloud, payment processors).
• Legal & safety, to comply with law, enforce agreements, or protect rights and safety.
• Business transfers, in connection with a merger, acquisition, or reorganisation, subject to this Policy.

We do not sell personal data and do not “share” it for cross‑context behavioural advertising as defined under US state laws.

7. International data transfers

As we operate from India and serve clients globally, your data may be processed in countries other than your own. Where required, we use appropriate safeguards for cross‑border transfers, such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), transfers to adequate jurisdictions, and equivalent mechanisms permitted under the India DPDP Act, 2023 and other applicable laws.

8. Data retention

We keep personal data only as long as needed for the purposes above, to provide and support our services, and to meet legal, tax, and accounting obligations, after which it is deleted or anonymised. Retention periods vary by data type and engagement.

9. How we protect your data

We apply reasonable technical and organisational measures, including encryption in transit and at rest for sensitive records, access controls, audit logging, and least‑privilege practices. No method of transmission or storage is fully secure, but we work to protect your information and to notify affected parties and regulators of personal‑data breaches as required by applicable law.

10. Your rights

Depending on where you live, you have some or all of the following rights. To exercise them, email privacy@trenith.com; we will verify your identity and respond within the timeframes required by the applicable law.

India (Digital Personal Data Protection Act, 2023 & DPDP Rules, 2025)

Access a summary of your personal data and processing; correction, completion, updating, and erasure; grievance redressal; withdrawal of consent; and nomination of another individual to exercise your rights. You may escalate unresolved grievances to the Data Protection Board of India. Our Grievance Officer can be reached at grievance@trenith.com or by post at Trenith Technologies Private Limited, Plot No. 272, Pragatinagar, Hyderabad, 500090, Telangana, India. We acknowledge grievances within 48 hours and resolve them within 30 days.

EEA & United Kingdom (GDPR / UK GDPR)

Access, rectification, erasure, restriction, data portability, objection to processing, and the right to withdraw consent. You may lodge a complaint with your local supervisory authority (in the UK, the ICO).

United States (CCPA/CPRA and other state laws)

Residents of California and the 19 other states with comprehensive privacy laws in effect in 2026 may request to know, access, delete, correct, and port personal information; opt out of the sale or sharing of personal information and targeted advertising; limit use of sensitive personal information; and not be discriminated against for exercising these rights.

Canada, Brazil, Australia & others

We honour equivalent rights under laws such as Canada’s PIPEDA, Brazil’s LGPD, and Australia’s Privacy Act, including access and correction, and complaint rights to the relevant regulator.

11. Children’s data

Our website and services are intended for businesses and adults and are not directed to children. Where the DPDP Act applies, we do not process a child’s personal data without verifiable parental consent and do not undertake tracking or targeted advertising directed at children.

12. Changes to this Policy

We may update this Policy as our services and the law evolve. We will revise the “Last updated” date above and, for material changes, take additional steps as required by law. Continued use of the site after an update means you accept the revised Policy.

13. Contact us

Privacy enquiries: privacy@trenith.com · Grievance Officer (India): grievance@trenith.com.